Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
File: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft (raw, json)
Hash identifier: zsXjV6K1H5kdArNIHkBjCtwCn9MOYFWWhoUk2avZaBU=
Subject key identifier: 71:0F:65:07:B5:6E:BC:89:E3:B0:1D:55:B9:19:BE:12:44:38:6F:3C
Authority key identifier: 07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
Certificate issuer: /CN=073848d8281be439e77750885b547a28152801bb
Certificate serial: 019EC0DB159F4148807E8F770DA92AED9279
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
Manifest number: 03C0
Signing time: Sat 13 Jun 2026 12:00:43 +0000
Manifest this update: Sat 13 Jun 2026 12:00:43 +0000
Manifest next update: Sun 14 Jun 2026 12:00:43 +0000
Files and hashes: 1: BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl (hash: 9utmMORT1ZWTlqyJu0QAgz4pD1+3VrbvcPJP1DDG0+E=)
2: N9S_icddgxWVBWPh-3jbM68-tq8.roa (hash: s2bnj7pTz/QN+Yh854SACOr/RPnNWxQwyzh+alMj+6w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:db:15:9f:41:48:80:7e:8f:77:0d:a9:2a:ed:92:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=073848d8281be439e77750885b547a28152801bb
Validity
Not Before: Jun 13 12:00:43 2026 GMT
Not After : Jun 14 12:00:43 2026 GMT
Subject: CN=710f6507b56ebc89e3b01d55b919be1244386f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:32:7d:3d:72:6c:3f:01:d3:52:a7:bc:00:48:
99:ec:23:21:bc:41:4c:17:19:f4:21:a5:0b:70:a8:
2f:64:d1:7e:df:26:6e:4c:c9:ea:6f:60:93:e2:48:
14:d5:47:36:20:8e:e0:e4:42:2a:30:c0:bb:3b:3c:
35:6c:c1:2a:8c:00:eb:c0:63:e2:55:92:26:fd:1b:
16:12:67:61:e5:dd:3b:16:33:8e:35:56:cf:a7:ac:
32:ee:8c:21:37:c9:a9:a6:37:5e:cb:14:a8:91:27:
0b:8c:2c:28:ec:8f:c8:53:7e:43:cc:69:21:92:5c:
7a:18:58:e3:0e:a8:13:ac:e6:78:24:73:58:bd:e5:
2d:38:99:60:df:3b:31:32:e0:a2:77:98:4a:c5:7b:
6d:d9:42:bd:90:8f:5c:e5:e9:ae:33:04:bc:8a:9b:
97:7a:fd:b3:a5:e4:4a:bb:0a:5a:6f:66:38:95:c7:
b2:93:44:ba:be:e5:40:07:c2:0e:85:0d:68:b9:81:
5c:ef:15:29:64:a4:da:60:e0:d5:7d:ee:c1:e1:32:
c1:15:b7:22:01:de:59:26:b7:82:ea:c3:b4:f3:9a:
33:32:39:7c:e4:3c:57:b0:61:10:3e:ad:4f:3b:a7:
a9:f1:1b:50:82:d4:f8:c6:bf:5b:d7:e0:40:03:70:
a9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0F:65:07:B5:6E:BC:89:E3:B0:1D:55:B9:19:BE:12:44:38:6F:3C
X509v3 Authority Key Identifier:
keyid:07:38:48:D8:28:1B:E4:39:E7:77:50:88:5B:54:7A:28:15:28:01:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/be40ea-89c9-4fe3-9d0c-4c5b200b6709/1/BzhI2Cgb5Dnnd1CIW1R6KBUoAbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:47:71:b5:4e:cf:df:7f:c3:bc:21:72:df:a1:32:e2:f9:c4:
66:7a:c5:0f:3c:4d:33:a8:a7:92:4c:8d:6a:7d:a7:2f:b1:84:
f6:75:98:88:53:9b:b3:5c:b2:59:c3:74:58:1b:8d:ca:83:47:
74:8f:1a:0c:ce:af:36:94:c2:8e:e4:53:a1:9b:94:a6:34:32:
d8:aa:ce:37:50:ab:ca:27:61:66:79:e4:eb:fe:3e:f4:83:c7:
09:74:11:54:7f:d4:c9:39:ed:bd:df:98:fb:50:4e:a3:38:9c:
ea:b0:90:3f:a3:fc:42:1a:6d:f2:c0:21:cb:1e:d6:f2:f8:a4:
39:65:7e:4b:20:92:f8:01:de:56:fb:61:10:a1:12:9d:b5:8c:
42:04:51:c7:70:1c:39:c2:bf:25:fb:78:a8:7c:63:d1:99:52:
eb:63:21:6c:24:28:f0:1d:ca:26:67:e9:0b:59:2f:bb:13:6b:
98:4c:43:7a:91:47:20:46:be:ba:9d:c9:d8:6e:4e:db:2a:b7:
a3:01:0b:da:3d:ef:9f:9c:a5:bb:6e:4d:17:3c:84:e0:14:44:
0d:dd:7f:95:f2:02:f9:69:ed:6c:a4:63:39:b8:2a:0d:e2:17:
aa:d3:5e:fd:80:50:c4:53:8f:df:49:09:3f:28:6d:b7:e7:1f:
2e:18:49:6b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7A2xWfQUiAfo93Dakq7ZJ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3Mzg0OGQ4MjgxYmU0MzllNzc3NTA4ODViNTQ3YTI4MTUy
ODAxYmIwHhcNMjYwNjEzMTIwMDQzWhcNMjYwNjE0MTIwMDQzWjAzMTEwLwYDVQQD
Eyg3MTBmNjUwN2I1NmViYzg5ZTNiMDFkNTViOTE5YmUxMjQ0Mzg2ZjNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTJ9PXJsPwHTUqe8AEiZ7CMhvEFM
Fxn0IaULcKgvZNF+3yZuTMnqb2CT4kgU1Uc2II7g5EIqMMC7Ozw1bMEqjADrwGPi
VZIm/RsWEmdh5d07FjOONVbPp6wy7owhN8mppjdeyxSokScLjCwo7I/IU35DzGkh
klx6GFjjDqgTrOZ4JHNYveUtOJlg3zsxMuCid5hKxXtt2UK9kI9c5emuMwS8ipuX
ev2zpeRKuwpab2Y4lceyk0S6vuVAB8IOhQ1ouYFc7xUpZKTaYODVfe7B4TLBFbci
Ad5ZJreC6sO085ozMjl85DxXsGEQPq1PO6ep8RtQgtT4xr9b1+BAA3CpPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHEPZQe1bryJ47AdVbkZvhJEOG88MB8GA1UdIwQY
MBaAFAc4SNgoG+Q553dQiFtUeigVKAG7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9iZTQwZWEtODljOS00ZmUzLTlkMGMt
NGM1YjIwMGI2NzA5LzEvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9iZTQwZWEtODljOS00ZmUzLTlkMGMtNGM1YjIwMGI2NzA5
LzEvQnpoSTJDZ2I1RG5uZDFDSVcxUjZLQlVvQWJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOUdxtU7P
33/DvCFy36Ey4vnEZnrFDzxNM6inkkyNan2nL7GE9nWYiFObs1yyWcN0WBuNyoNH
dI8aDM6vNpTCjuRToZuUpjQy2KrON1CryidhZnnk6/4+9IPHCXQRVH/UyTntvd+Y
+1BOozic6rCQP6P8Qhpt8sAhyx7W8vikOWV+SyCS+AHeVvthEKESnbWMQgRRx3Ac
OcK/Jft4qHxj0ZlS62MhbCQo8B3KJmfpC1kvuxNrmExDepFHIEa+up3J2G5O2yq3
owEL2j3vn5ylu25NFzyE4BREDd1/lfIC+WntbKRjObgqDeIXqtNe/YBQxFOP30kJ
Pyhtt+cfLhhJaw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:09:09 2026 by rpki-client